RedHatRHSA-2023:4410

HistoryAug 01, 2023 - 1:29 p.m.

(RHSA-2023:4410) Important: mod_auth_openidc:2.3 security update

2023-08-0113:29:31

access.redhat.com

mod_auth_openidc

security update

apache http server

openid connect

cve-2023-37464

0.001 Low

EPSS

Percentile

48.9%

JSON

The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.

Security Fix(es):

cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE (CVE-2023-37464)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyppc64lecjose-debugsource< 0.6.1-3.module+el8.2.0+19461+3a40b6eecjose-debugsource-0.6.1-3.module+el8.2.0+19461+3a40b6ee.ppc64le.rpm
RedHatanyppc64lemod_auth_openidc< 2.3.7-4.module+el8.2.0+6919+ac02cfd2.3mod_auth_openidc-2.3.7-4.module+el8.2.0+6919+ac02cfd2.3.ppc64le.rpm
RedHatanyx86_64cjose< 0.6.1-3.module+el8.2.0+19461+3a40b6eecjose-0.6.1-3.module+el8.2.0+19461+3a40b6ee.x86_64.rpm
RedHatanyx86_64mod_auth_openidc-debugsource< 2.3.7-4.module+el8.2.0+6919+ac02cfd2.3mod_auth_openidc-debugsource-2.3.7-4.module+el8.2.0+6919+ac02cfd2.3.x86_64.rpm
RedHatanyx86_64cjose-debugsource< 0.6.1-3.module+el8.2.0+19461+3a40b6eecjose-debugsource-0.6.1-3.module+el8.2.0+19461+3a40b6ee.x86_64.rpm
RedHatanyx86_64mod_auth_openidc-debuginfo< 2.3.7-4.module+el8.2.0+6919+ac02cfd2.3mod_auth_openidc-debuginfo-2.3.7-4.module+el8.2.0+6919+ac02cfd2.3.x86_64.rpm
RedHatanyppc64lecjose-devel< 0.6.1-3.module+el8.2.0+19461+3a40b6eecjose-devel-0.6.1-3.module+el8.2.0+19461+3a40b6ee.ppc64le.rpm
RedHatanyppc64lecjose< 0.6.1-3.module+el8.2.0+19461+3a40b6eecjose-0.6.1-3.module+el8.2.0+19461+3a40b6ee.ppc64le.rpm
RedHatanyppc64lemod_auth_openidc-debuginfo< 2.3.7-4.module+el8.2.0+6919+ac02cfd2.3mod_auth_openidc-debuginfo-2.3.7-4.module+el8.2.0+6919+ac02cfd2.3.ppc64le.rpm
RedHatanyx86_64cjose-devel< 0.6.1-3.module+el8.2.0+19461+3a40b6eecjose-devel-0.6.1-3.module+el8.2.0+19461+3a40b6ee.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc64le	cjose-debugsource	< 0.6.1-3.module+el8.2.0+19461+3a40b6ee	cjose-debugsource-0.6.1-3.module+el8.2.0+19461+3a40b6ee.ppc64le.rpm
RedHat	any	ppc64le	mod_auth_openidc	< 2.3.7-4.module+el8.2.0+6919+ac02cfd2.3	mod_auth_openidc-2.3.7-4.module+el8.2.0+6919+ac02cfd2.3.ppc64le.rpm
RedHat	any	x86_64	cjose	< 0.6.1-3.module+el8.2.0+19461+3a40b6ee	cjose-0.6.1-3.module+el8.2.0+19461+3a40b6ee.x86_64.rpm
RedHat	any	x86_64	mod_auth_openidc-debugsource	< 2.3.7-4.module+el8.2.0+6919+ac02cfd2.3	mod_auth_openidc-debugsource-2.3.7-4.module+el8.2.0+6919+ac02cfd2.3.x86_64.rpm
RedHat	any	x86_64	cjose-debugsource	< 0.6.1-3.module+el8.2.0+19461+3a40b6ee	cjose-debugsource-0.6.1-3.module+el8.2.0+19461+3a40b6ee.x86_64.rpm
RedHat	any	x86_64	mod_auth_openidc-debuginfo	< 2.3.7-4.module+el8.2.0+6919+ac02cfd2.3	mod_auth_openidc-debuginfo-2.3.7-4.module+el8.2.0+6919+ac02cfd2.3.x86_64.rpm
RedHat	any	ppc64le	cjose-devel	< 0.6.1-3.module+el8.2.0+19461+3a40b6ee	cjose-devel-0.6.1-3.module+el8.2.0+19461+3a40b6ee.ppc64le.rpm
RedHat	any	ppc64le	cjose	< 0.6.1-3.module+el8.2.0+19461+3a40b6ee	cjose-0.6.1-3.module+el8.2.0+19461+3a40b6ee.ppc64le.rpm
RedHat	any	ppc64le	mod_auth_openidc-debuginfo	< 2.3.7-4.module+el8.2.0+6919+ac02cfd2.3	mod_auth_openidc-debuginfo-2.3.7-4.module+el8.2.0+6919+ac02cfd2.3.ppc64le.rpm
RedHat	any	x86_64	cjose-devel	< 0.6.1-3.module+el8.2.0+19461+3a40b6ee	cjose-devel-0.6.1-3.module+el8.2.0+19461+3a40b6ee.x86_64.rpm

Rows per page:

1-10 of 141

(RHSA-2023:4410) Important: mod_auth_openidc:2.3 security update

Related